Privacy Policy

Last updated: 26 July 2026

Simo Digital Hub is committed to protecting your personal information in accordance with the NZ Privacy Act 2020.

Who we are

Simo Digital Hub is a digital marketing and SEO business based in New Zealand. We operate remotely and provide SEO, content marketing, and digital services to small businesses in New Zealand.

For privacy enquiries, contact us at: hello@simodigitalhub.co.nz

What information we collect and why

When you submit an enquiry

When you fill in our quote request or contact form, we collect:

  • Your name and business name — so we can address you correctly and understand your business
  • Your email address — so we can respond to your enquiry
  • Your phone number (if you choose to provide it) — so we can call you if you prefer
  • Your industry and service interest — so we can give you a relevant response

We use this information only to respond to your enquiry. We do not add you to a marketing list or share your details with third parties without your consent.

When you create an account (client portal)

When you register for our client portal, we collect:

  • Your name and email address — to create and manage your account
  • A password (stored in encrypted form — we never see your actual password)
  • Your business details and service preferences — to manage your subscription and deliver our services

When you complete our onboarding questionnaire

If you engage us for a website build, we send you a private link to an onboarding questionnaire. Through it we collect the details we need to design and build your site, including your business and contact details, information about your customers and competitors, your content and design preferences, and any files you choose to upload (such as a logo or brand guidelines).

We use these answers only to plan and deliver your project. The link is single-use and expires after 96 hours. Your answers and uploaded files are stored privately and are visible only to authorised staff.

When we prepare an SEO report for you

As part of our SEO service, our staff may generate a website performance report using your business website address. To do this, we use a specialist SEO data provider to gather publicly available information about your website and search rankings (such as keyword positions and technical page details), and an AI writing assistant to turn that data into a plain-English summary for your report.

Only your website address and the resulting report data are shared with these providers — never your account password, payment details, or private support messages. Reports are reviewed by our staff before being sent to you.

When you make a payment

Monthly retainer payments are billed by card through Stripe's hosted checkout. Your card details are entered directly on Stripe's payment page — we never see, store, or have access to your card number, CVV, or expiry date.

For one-off charges (such as a website build), you can choose to pay by card or by Klarna instalments, also via Stripe's hosted checkout. If you choose Klarna, Stripe shares the information needed to process your instalment plan (such as your name, contact details, and order amount) directly with Klarna — we do not separately store your Klarna account details.

We keep a record of your subscription status and billing history (plan, amount, and payment dates) so we can manage your account, but this comes from Stripe and never includes your full card or Klarna account details.

When we connect your Google Search Console

For clients on a performance-reporting plan, our staff may ask to connect your Google Search Console property so we can show your search performance in your client dashboard. This only happens with your prior agreement (for example, by adding our agency Google account as a user on your property, or through a Google sign-in you approve).

We request read-only access to Search Console data (clicks, impressions, average position, click-through rate, and the queries and pages driving them). We do not request access to make changes to your property, and we never request access to your Gmail, Drive, or any other Google service.

Your Google access token is encrypted at rest and used only by an automated nightly process that pulls your latest metrics into our database. It is never used to access any other Google data, and you can revoke this access at any time from your Google Account settings or by asking us to disconnect it.

How we store and protect your information

Your information is stored securely using the following services:

  • Vercel (USA) — our website hosting provider
  • Neon (USA) — database hosting for enquiry details
  • Stripe (USA) — payment processing
  • Klarna (Sweden/EU) — instalment payment processing, only if you choose to pay by Klarna
  • Resend (USA) — email delivery
  • Vercel Blob (USA) — private, access-controlled storage for documents and files you or we upload
  • Sentry (USA) — error monitoring, so we can detect and fix technical problems; this may incidentally include the page you were on and technical error details, never your password or payment details
  • Plausible (EU) — privacy-focused, cookieless website analytics (page views and button clicks only; no personal profile is built)
  • Google (USA) — only if you agree to connect Search Console reporting; your access token is stored encrypted and used only to pull your search performance data
  • DataForSEO (USA/EU) — only when we prepare an SEO report; gathers publicly available search and website ranking data for your website address
  • Anthropic, via Vercel's AI Gateway (USA) — only when we prepare an SEO report; turns the gathered data into plain-English summary text for the report

All of these providers are based outside New Zealand. By using our services, you acknowledge that your information may be processed in the United States and the European Union. We have chosen providers with strong privacy and security practices.

We protect your information through:

  • Encrypted connections (HTTPS) for all data in transit
  • Encrypted storage for passwords
  • Private, access-controlled storage for uploaded files
  • Restricted access — only authorised staff can access personal data
  • Security headers and firewall-level traffic filtering on all data collection endpoints

How long we keep your information

InformationRetention period
Enquiry form submissionsKept while we respond to your enquiry; deleted once it is resolved, or sooner on request
Onboarding questionnaire answers and filesFor the duration of your project, then held as part of your account record until deletion is requested
Account data (name, email, preferences)Until you request deletion, then held for 90 days, then permanently deleted
Payment and subscription records7 years from the date of transaction (required by NZ tax law)
Support correspondenceUntil your account is deleted, then held for 90 days, then deleted
Google Search Console access token and metricsUntil you or we disconnect the integration, or your account is deleted (whichever is first), then permanently removed

Your rights under the NZ Privacy Act 2020

You have the right to:

Access your information — you can request a copy of the personal information we hold about you. We will respond within 20 working days.

Correct your information — if any information we hold about you is inaccurate or out of date, you can update it from your account dashboard or ask us to correct it.

Delete your information — you can request deletion of your account and personal data at any time from your account dashboard or by contacting us. We will soft-delete your account immediately and permanently delete your personal data after 90 days. Financial records required by law will be retained in anonymised form.

Complain to the Privacy Commissioner — if you believe we have breached the Privacy Act 2020, you can make a complaint to the Office of the Privacy Commissioner at privacy.org.nz.

To exercise any of these rights, contact us at: hello@simodigitalhub.co.nz

Cookies

Our website does not use cookies for tracking or advertising.

We may use a functional cookie to maintain your login session if you are a registered client. This cookie is essential for the client portal to work and does not track you across other websites.

Changes to this policy

We may update this Privacy Policy from time to time. We will notify registered clients of significant changes by email. The current version will always be available at simodigitalhub.co.nz/privacy-policy.

Contact

For any privacy-related questions or requests:

Email: hello@simodigitalhub.co.nz

Business: Simo Digital Hub, New Zealand